All Products Support Forum

Are Firefox extensions sandboxed from the rest of the operating system? Suppose I have installed a malicious extension/add-on on my system. Would it be possible for the extension to access and tamper with my operating system? I do not care if it tampers with the browser tabs or data inside the browser as long as it does not have a way to tamper with my OS. Using MacOS Sonoma

I would like to change my account settings for my hotmail account, but when I try to change from Normal Password under Outgoing Server (SMTP) there is no option for Oauth. Is there something I can do to enable this option.

Microsoft sent email last night announcing the end of "Normal Password" for Hotmail, and warning that Hotmail would REQUIRE "modern authrentication" beginning 9/16. I have personal desktop subscription to Microsoft 365. I have set Microsoft account to 2FA and checked in Tbird that cookies are enabled.

I have spent hours and days trying & failing. With server imap-mail.outlook.com using OAUTH2, Thunderbird won't sync and shows message saying that server doesn't support the authentication protocol please enter another one. With 2FA still turned on and using Normal Password setting and entering an App Password from Microsoft, the Imap connection is fine about 85% of the time, needing re-entry of the App password about once a day or so (usually requires several tries until App Password gets accepted.)

The 0AUTH2 fails with Norton Smart Firewall turned Off or Turned On-makes no difference.

(Sending email with Outlook and 0AUTH2 DOES work okay.)

I've also tried Imap connection with a different server: Outlook.office365.com, using 0AUTH2.

In this case, Tbird shows me a Timeout error and never makes an Imap connection to the server.  

I've been limping along with the app password, and "normal password" authentication, but now Microsoft announces they will stop accepting connections that are not 0Auth2 ("modern authentication") from Tbird or any other software after 9/16. The clock is ticking. I've tried every remedy I've seen online from Tbird or from Microsoft. Nothing has yet allowed a QAUTH connection for Tbird to a hotmail IMAP server. Please help! !

I can no longer use my camera on firefox, firefox displayed some message about camera when we were trying to chat, but I missed it, I have granted relevant permissions on the site, that we use reularly. The camera icon on the address bar appears red, and I noticed that in Windows security, it lists firefox access requests, but shows no way to grant these requests.

I am not tech minded so please if anyone could keep it simple, I would appreciate it.

One of the add-in permissions is "Access your data for sites in the “named” domain". I looked at that and thought, "That certainly cannot include passwords"; BUT the explanation for this permission is: "The extension could read the content of web pages you visit in the specified domain, as well as data you enter into those web pages, such as usernames and passwords. "

I was stunned.

That means that addins that get this permission have access to my banking/medical/etc. usernames & passwords. This is not acceptable. Can a permission be developed that would be: "Access your data for sites in the “named” domain" (except usernames/passwords).

The permission "Access your data for all websites" is significantly worse in that it applies to all sites.

Hello,

When the primary password window opens and I click Cancel, can that window close AND can it prevent Thunderbird from opening?

Example: what if I bring my pc to a repair shop and they open thunderbird and click Cancel on the primary password window. They can See my previously viewed email. I do not want them to see those. Clicking Cancel AND closing Thunderbird would prevent them from seeing emails.

Could this be a future enhancement?

Thanks

Jim

Hello,

So - SMTP suddenly stopped working in our whole company. We are using Gmail accounts configured with Thunderbird for a few years already. It's all been working until an hour ago.

Tried deleting and adding accounts, changing authentification to google app passwords etc.\

SMTP servers do have different descriptions.

Just configured an account in outlook and it works out of the box, so I'm guessing it's got something to do with Thunderbird settings, but we didn't change anything, and especially that we have 8 PCs and it stopped working on every one of it.

The error I get when trying to send a message is:

"Sending message failed. The message failed to send because it failed to connect to the outgoing mail (SMTP) server "smtp.gmail.com". The server may be unreachable or not accepting SMTP connections. Please verify that your outgoing mail server settings are correct and then try again or contact your server administrator."

(translated from polish).

Best regards.

OK, I have Firefox (Windows 10 AMD64, desktop) configured to delete history when I close it.

So, I see that regular webiste cookies are deleted.

But are the HSTS website "super cookies" deleted?

https://ipleak.com/articles/what-is-hsts-super-cookies What are HSTS Super cookies and why are they dangerous?

thanx.

Without notice, Thunderbird today required me to sign-in to my Google account and then produced a window in which it said it wanted to access to my mail, contacts and calendar; in order to compose, send, share, delete permanently, among actions on my personal content. I tried to "Deny" (see below) but the window just returned and returned and could not be deleted. (see "Uploaded images", below for the content of this window).

Is this a scam? Or the result of a hacker?

Both 'Enhanced Tracking Protection' and 'Site permissions' show exceptions and an explanation of what they are (for 'Enhanced Tracking Protection' anyway) but seem to have no way to add an exception.

How are exceptions added 'Enhanced Tracking Protection' and 'Site permissions' in Fennec?

Thanks

Lately I have been getting a lot of spam and have identified all coming into my inbox as spam. Now many are automatically moved to junk mail box and that is a good thing. Unfortunately it also seems to be slowing Thunderbird down. I am afraid that many of the "Filters" generated may be duplicated. Is it possible to see them and maybe edit them to reduce the impact on my system?

I've used Thunderbird for years using a POP setting; Network Solutions would prefer that I use IMAP. I don't know the difference, but they must and prefer that it be IMAP (netsol-imap-oxcs.hostingplatform.com) (PORT: 993. When bringing up the settings in my mail account, it doesn't allow anyone to change that field. What can I do? I want to use Thunderbird; because of this particular setting I haven't been able to, and must instead log on to Network Solutions and go through their email interface. Thank you.

Dear Sir/Madam,

I use the Thunderbird email client on my Microsoft Windows 10 desktop tower PC in order to access my Gmail account using POP3, using "only" my email address and password.

However, I note that Google plan to introduce more stringent and tighter sign in/authentication methods from September 2024 as follows:

https://support.google.com/a/answer/6260879?hl=en

https://support.google.com/a/answer/6260879?hl=en

Does Thunderbird have a workaround for Google's plans please?

Thanking you.

Hi

I cant find an Add-On for blocking ads in newsletters.

How can I block the very annoying Ads in newsletters? These newsletters from mainstream newspapers are a real imposition.

How-To block ads in mails with Thunderbird?

Hello,

I appreciate very much the recent security changes in Firefox 127, about mixed content. I think it really does improve both security and privacy, but I have HTTPS websites in a local network (private IP addresses) that load some images from a local IP camera over HTTP. I do not have control over these IP camera images, so as a temporary workaround I am allowing the whole website to be delivered over plain HTTP.

It's not a huge security issue, because it's on a local network which I access over the Internet via a VPN, but I would prefer to keep the website on HTTPS and allow mixed content for this specific IP address, so to keep the protection fully enabled when I browse the Internet.

Is there a way to enter a specific IP address in an exception list, so to selectively allow mixed content? Or, in alternative, is it possible to specify that all web requests from private IP addresses (RFC 1918) should allow mixed content?

Many thanks,

Piero

Hello: I can't seem to receive emails from a specific address from a professional office (with their own URL), which I have never (not knowingly) ever classified as JUNK, ... I have checked my Junk box, Deleted Box, and my filters from __@Bell.net, from which I download to T-Bird. That email addr or URL is NOT blocked, and I have put that addr on my "SafeSenders" List.

I don't see that email anywhere else in T-Bird Folders,, and the sender had to call me, and resend from a diff address, their own Gmail acct.!

And I can send to them, to few ppl in that office,... And I don't get any emails from anyone @the URL, meaning no other staff from that URL can send anything to me!

Did I accidentally classify it as JUNK, but I never received anything from the beginning,.. So I do NOT believe I would have set it as Junk...

I have checked ALL settings in T-Bird and at __Bell.Net in my settings, but to no avail.

Pls help, Much appreciated, Az

I went to passwords to change my password and one of the email ids - bobmater@comcast.net - is missing. There’s no account listed to change the password. All my other emails addresses are there. I think when you changed over, you deleted my account somehow.